Kaydet (Commit) 86da16bb authored tarafından Eike Rathke's avatar Eike Rathke Kaydeden (comit) Fridrich Strba

resolved rhbz#918168 ICU: CVE-2013-0900 race condition allows DoS

Upstream changes
https://ssl.icu-project.org/trac/changeset/32865
https://ssl.icu-project.org/trac/changeset/32908

See also
https://bugzilla.redhat.com/show_bug.cgi?id=918167

Plus changed UMutex to UMTX to make these compile in icu49.

Change-Id: Ida28f7c955959565a2133242b826bb5038758407
Reviewed-on: https://gerrit.libreoffice.org/2576Reviewed-by: 's avatarFridrich Strba <fridrich@documentfoundation.org>
Tested-by: 's avatarFridrich Strba <fridrich@documentfoundation.org>
üst 8a203e49
diff -ruN icu.orig/source/common/locid.cpp icu/source/common/locid.cpp
--- misc/build/icu.orig/source/common/locid.cpp 2013-03-06 21:27:35.170696967 +0100
+++ misc/build/icu/source/common/locid.cpp 2013-03-06 21:29:47.711378977 +0100
@@ -53,7 +53,7 @@
static Locale *gLocaleCache = NULL;
// gDefaultLocaleMutex protects all access to gDefaultLocalesHashT and gDefaultLocale.
-static UMutex gDefaultLocaleMutex = U_MUTEX_INITIALIZER;
+static UMTX gDefaultLocaleMutex = NULL;
static UHashtable *gDefaultLocalesHashT = NULL;
static Locale *gDefaultLocale = NULL;
......@@ -59,6 +59,8 @@ PATCH_FILES=\
icu4c-solarisgcc.patch \
icu4c-mkdir.patch \
icu4c-buffer-overflow.patch \
icu4c.9737.CVE-2013-0900_changesets_32865_32908.patch \
icu4c-CVE-2013-0900_umutex.patch \
.IF "$(OS)"=="ANDROID"
PATCH_FILES+=\
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment